Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier: 1CqNXDpBeO/AKH6lDjzkcu/cUo+HLK9v8t4WZZGU2ws=
Subject key identifier: DE:FD:45:E4:81:53:17:CD:F9:BF:6F:C0:73:11:B8:25:8A:18:F0:0B
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 019A1A2AEAC615A02411E8F9B2734D036628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number: 0AF1
Signing time: Sat 25 Oct 2025 07:00:11 +0000
Manifest this update: Sat 25 Oct 2025 07:00:11 +0000
Manifest next update: Sun 26 Oct 2025 07:00:11 +0000
Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: okHIS83fDk/eZ3BdpE77u8MRPrvORgLMf2ba7yDR1JM=)
2: w9ZFhmeWl9P8oxUCmO0haW1uUVw.roa (hash: 4gJ+U4SX6C0kJ8fPc/SsSrnAYsThJp4UepZuuWBccp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:2a:ea:c6:15:a0:24:11:e8:f9:b2:73:4d:03:66:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: Oct 25 07:00:11 2025 GMT
Not After : Oct 26 07:00:11 2025 GMT
Subject: CN=defd45e4815317cdf9bf6fc07311b8258a18f00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:89:27:cd:ad:f6:6c:1d:02:2b:22:77:2f:c0:
28:c3:6e:03:6e:da:a4:6c:c0:0b:65:5f:25:15:b4:
04:c6:17:c0:c3:8c:0c:ef:ac:83:4a:c2:ff:8c:a6:
1f:f5:4c:9a:bf:c3:6f:aa:b5:41:cc:c3:eb:b9:02:
39:bf:08:d9:f1:c7:67:d9:36:cc:cd:d0:1b:c3:fd:
ea:36:34:f5:e9:ef:87:48:c8:f5:c4:f0:69:93:32:
2a:5c:57:f3:3a:9e:d5:4f:e2:d5:1f:3d:a4:cc:70:
44:43:a1:22:6a:a4:3c:dc:a0:79:2a:73:1d:34:01:
20:04:a1:b9:7c:9e:8b:20:3d:b8:10:c2:7b:54:49:
c7:e7:0b:5c:4c:63:73:a9:90:dd:f4:65:c2:16:6b:
c9:68:1b:58:66:36:52:9c:60:55:79:8a:02:33:02:
89:b2:a3:b1:13:24:11:b7:9c:6b:c2:4f:6c:54:0e:
49:6d:38:f9:ec:fd:85:cb:ba:db:c3:25:cc:0e:5f:
20:31:bb:da:c8:49:4b:19:13:13:12:0f:15:a6:ce:
d8:30:78:a2:20:e6:e2:28:5a:47:d8:92:03:a4:4a:
3d:8c:39:3c:e6:be:9a:54:62:0d:48:eb:07:64:f6:
97:9e:f5:7a:50:29:53:fb:79:2a:3d:52:43:b1:1e:
a3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FD:45:E4:81:53:17:CD:F9:BF:6F:C0:73:11:B8:25:8A:18:F0:0B
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:dd:6e:fb:94:f4:cd:b3:e7:96:5d:3e:9a:24:8c:da:2b:be:
b1:e5:7c:fb:d5:98:40:77:b8:a2:26:62:5a:07:c7:08:00:4c:
29:c0:bb:97:54:ca:e2:d0:7c:f1:df:6b:dc:e0:1d:b3:00:18:
da:af:9d:4e:7e:a3:dd:79:5d:f9:96:4a:e0:61:e5:41:22:84:
ae:6a:f5:ff:2d:aa:86:dc:df:54:da:dc:fa:b9:04:17:6e:98:
ab:a7:e2:ae:59:c1:0c:05:71:77:f4:bc:ed:fb:7c:82:4c:4f:
cb:c3:3b:60:f5:4b:bf:b4:a5:d7:47:2e:5d:5e:62:e8:3f:79:
b0:41:49:7a:c5:e2:a8:fa:46:74:19:ea:23:c6:48:6e:60:b0:
fc:a2:c3:23:58:50:0a:3f:a8:7f:d8:7b:95:b5:e3:c8:35:c8:
1f:9f:d5:0d:1d:90:9b:2d:01:98:ec:55:7c:ef:6b:90:29:37:
e2:92:3f:4e:1a:be:b5:5a:2a:72:ac:7c:58:13:66:e5:e2:8b:
aa:97:e0:b5:1d:a4:40:fd:40:39:2b:24:06:be:d7:4a:fb:91:
88:97:6a:21:e0:20:c5:91:33:7a:34:aa:47:b2:71:9b:64:1d:
0d:ad:9c:7a:67:35:f0:f5:e1:e5:1e:60:b9:95:48:8d:64:94:
fb:62:b5:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoaKurGFaAkEej5snNNA2YoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMzI3MTExNzA3Njg5NTBmZGQ5ZjlkZWZlNjUxZjJkNWEx
MzEyYmUwHhcNMjUxMDI1MDcwMDExWhcNMjUxMDI2MDcwMDExWjAzMTEwLwYDVQQD
EyhkZWZkNDVlNDgxNTMxN2NkZjliZjZmYzA3MzExYjgyNThhMThmMDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIknza32bB0CKyJ3L8Aow24Dbtqk
bMALZV8lFbQExhfAw4wM76yDSsL/jKYf9Uyav8NvqrVBzMPruQI5vwjZ8cdn2TbM
zdAbw/3qNjT16e+HSMj1xPBpkzIqXFfzOp7VT+LVHz2kzHBEQ6EiaqQ83KB5KnMd
NAEgBKG5fJ6LID24EMJ7VEnH5wtcTGNzqZDd9GXCFmvJaBtYZjZSnGBVeYoCMwKJ
sqOxEyQRt5xrwk9sVA5JbTj57P2Fy7rbwyXMDl8gMbvayElLGRMTEg8Vps7YMHii
IObiKFpH2JIDpEo9jDk85r6aVGINSOsHZPaXnvV6UClT+3kqPVJDsR6jvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN79ReSBUxfN+b9vwHMRuCWKGPALMB8GA1UdIwQY
MBaAFJMycRFwdolQ/dn53v5lHy1aExK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hZmNkNDAtMmE1MC00YzExLWJhNDct
ZTExZmZlYzg5Y2Q0LzEva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hZmNkNDAtMmE1MC00YzExLWJhNDctZTExZmZlYzg5Y2Q0
LzEva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj91u+5T0
zbPnll0+miSM2iu+seV8+9WYQHe4oiZiWgfHCABMKcC7l1TK4tB88d9r3OAdswAY
2q+dTn6j3Xld+ZZK4GHlQSKErmr1/y2qhtzfVNrc+rkEF26Yq6firlnBDAVxd/S8
7ft8gkxPy8M7YPVLv7Sl10cuXV5i6D95sEFJesXiqPpGdBnqI8ZIbmCw/KLDI1hQ
Cj+of9h7lbXjyDXIH5/VDR2Qmy0BmOxVfO9rkCk34pI/Thq+tVoqcqx8WBNm5eKL
qpfgtR2kQP1AOSskBr7XSvuRiJdqIeAgxZEzejSqR7Jxm2QdDa2cemc18PXh5R5g
uZVIjWSU+2K1Xw==
-----END CERTIFICATE-----
Generated at Sat Oct 25 17:21:29 2025 by rpki-client